Addressed issue #43

Solution for issue https://github.com/privly/privly-applications/issues/43
This is an attack vector. You can't assign to html like this. I recommend putting this whole block into the template and unhiding it when it is ready to be shown-- i.e. when you assign the URL text.